CVE-2025-12648

Name of the Vulnerable Software and Affected Versions WP-Members Membership Plugin for WordPress versions up to and including 3.5.4.4

Description The WP-Members Membership Plugin for WordPress stores user-uploaded files in predictable directories (wp-content/uploads/wpmembers/user files/<user id>/) without sufficient access controls. This allows unauthenticated attackers to directly access and download sensitive documents uploaded by site users by guessing or enumerating user ids and filenames. Basic directory listing protection (.htaccess with Options -Indexes) is insufficient to prevent access.

Recommendations Versions prior to 3.5.4.4 should be updated.